22 matches found
GO-2024-2844 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2024-2858 vulnerabilities
Vulnerabilities for packages: grafana-fips...
CVE-2026-36820
Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
MAL-2025-36820 Malicious code in thisisclearlysomekindoftestright (npm)
The package thisisclearlysomekindoftestright was found to contain malicious code...
CVE-2023-36820
Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider. Any OIDC setup using Micronaut...
io.micronaut.security:micronaut-security-aot (3.11.0) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (3.11.0)
io.micronaut.security:micronaut-security-oauth2 MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut.security:micronaut-security-oauth2 and may be impacted: - io.micronaut.security:micronaut-security-aot 3.11.0 Source cves:...
io.micronaut.security:micronaut-security-aot (>=3.9.0, <=3.9.5) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (>=3.9.0, <=3.9.5)
io.micronaut.security:micronaut-security-oauth2 MAVEN version =3.9.0, =3.9.0, =3.9.5 Source cves: CVE-2023-36820 Source advisory: MEND:CVE-2023-36820...
io.micronaut.security:micronaut-security-aot (3.4.2) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (3.4.2)
io.micronaut.security:micronaut-security-oauth2 MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut.security:micronaut-security-oauth2 and may be impacted: - io.micronaut.security:micronaut-security-aot 3.4.2 Source cves:...
CVE-2023-36820
Micronaut Security (io.micronaut.security: micronaut-security-oauth2) contains a vulnerability in IdTokenClaimsValidator where aud validation is skipped when a token is issued by the same issuer/provider. This affects multiple Micronaut OIDC setups where several applications share the same issuer...
io.archimedesfw.security:archimedes-security-auth-micronaut (>=0.2.0, <=0.2.1) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (3.8.3)
io.micronaut.security:micronaut-security-oauth2 MAVEN version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut.security:micronaut-security-oauth2 and may be impacted: - io.archimedesfw.security:archimedes-security-auth-micronaut =0.2....
io.micronaut.security:micronaut-security-aot (3.11.0) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (3.11.0)
io.micronaut.security:micronaut-security-oauth2 MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut.security:micronaut-security-oauth2 and may be impacted: - io.micronaut.security:micronaut-security-aot 3.11.0 Source cves:...
io.archimedesfw.security:archimedes-security-auth-micronaut (>=0.2.0, <=0.2.1) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (3.8.3)
io.micronaut.security:micronaut-security-oauth2 MAVEN version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut.security:micronaut-security-oauth2 and may be impacted: - io.archimedesfw.security:archimedes-security-auth-micronaut =0.2....
io.micronaut.security:micronaut-security-aot (>=3.10.0, <=3.10.1) potentially affected by CVE-2023-36820 via io.micronaut.security:micronaut-security-oauth2 (>=3.10.0, <=3.10.1)
io.micronaut.security:micronaut-security-oauth2 MAVEN version =3.10.0, =3.10.0, =3.10.1 Source cves: CVE-2023-36820 Source advisory: GHSA-QW22-8W9R-864H...
CVE-2023-36820
creationtimestamp| type| source ---|---|--- 2023-10-05 17:54:27+00:00| published-proof-of-concept| https://github.com/micronaut-projects/micronaut-security/security/advisories/GHSA-qw22-8w9r-864h 2023-10-09 18:15:55+00:00| seen| https://t.me/cibsecurity/71841...
CVE-2021-36820
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...
CVE-2021-36820
CVE-2021-36820 is rejected and does not represent an active vulnerability entry.
Logitech VideoCall ActiveX Control Buffer Overflow
No description provided by source. $Id: logitechvideocallstart.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Logitech VideoCall - ActiveX Control Buffer Overflow (Metasploit)
$Id: logitechvideocallstart.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Logitech VideoCall ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control wcamxmp.dll 2.0.3470.448. By sending an overly long string to the "Start" method, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/logitechvideocall/start msf...